Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3635353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a3635353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /kaBIszuNMggAy+vvkrYC1KfLGEq2N0ktrFryg161B0=
Subject key identifier:   B6:12:8D:B9:F1:CF:E9:01:DA:C8:53:38:8A:99:23:C2:A9:5D:16:AE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6458DC956B9983CB66FEC78347F92E8BBA53AFCA
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3635353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 06:55:01 +0000
ROA not before:           Sat 19 Feb 2022 06:50:01 +0000
ROA not after:            Sat 18 Feb 2023 06:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:655::/80 maxlen: 80
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:58:dc:95:6b:99:83:cb:66:fe:c7:83:47:f9:2e:8b:ba:53:af:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 06:50:01 2022 GMT
            Not After : Feb 18 06:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:6a:ad:db:ce:ea:e7:da:06:92:72:ea:36:
                    1e:93:1b:e8:77:c0:cf:d8:07:99:5f:ce:3e:a8:dc:
                    50:61:14:13:93:ea:dd:f2:f2:ba:19:2e:b5:4a:46:
                    19:45:34:f2:ad:1b:a1:44:24:89:ad:82:60:ce:28:
                    04:17:14:5c:d6:26:75:d3:42:7c:ec:7b:3a:d6:6f:
                    8a:26:ec:bc:28:75:bc:c5:5c:87:51:87:38:74:fd:
                    f4:85:7b:9b:6e:26:67:de:1b:ef:5d:94:00:cf:af:
                    fa:61:e7:8d:3a:c3:4b:e9:1e:76:3d:83:f1:4f:3a:
                    00:95:e5:b2:fe:12:a8:b4:d7:30:7f:7a:6b:09:94:
                    40:d4:12:d6:4d:66:e9:36:c7:a3:9d:ae:b6:af:1b:
                    4f:99:2f:84:68:dd:86:9b:91:a5:3d:1a:3a:be:d8:
                    f0:dd:20:b9:a9:61:20:9b:17:0f:1d:b3:ad:36:7a:
                    3a:c2:f9:cc:12:bd:09:3b:6f:1e:1f:37:55:72:9b:
                    b8:f2:f2:09:f0:4f:65:d4:ad:0c:e1:7f:e7:cf:bf:
                    e2:4d:df:ec:7a:55:3f:4a:d7:57:e0:b8:20:b4:a7:
                    4f:ea:33:12:96:95:a8:5b:c6:4b:91:fd:5a:6e:f9:
                    c6:4b:9c:2e:a3:09:5f:31:ce:a9:9a:fe:45:4f:b9:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:12:8D:B9:F1:CF:E9:01:DA:C8:53:38:8A:99:23:C2:A9:5D:16:AE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a3635353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:655::/80

    Signature Algorithm: sha256WithRSAEncryption
         59:39:67:c9:05:5f:09:2a:e1:00:6c:f8:0f:ff:50:9d:9b:22:
         cd:76:75:60:ec:c0:f4:20:bd:a9:8a:a8:94:8f:73:ee:50:a3:
         d3:3f:5f:e7:2f:44:da:e5:e3:d5:11:c2:ff:09:81:f7:9d:58:
         f6:95:b2:4b:ea:72:59:92:f3:ca:ef:48:36:c2:8b:81:2d:af:
         d6:51:50:d4:bc:ed:3a:f3:f9:fe:cd:87:a3:f4:92:e0:5b:5b:
         3a:1f:e6:d0:36:da:b4:6e:b1:41:e5:61:32:6f:4c:e4:8f:b5:
         8d:f6:5c:78:ed:98:5c:e4:5c:e8:44:73:ee:84:d3:3c:f1:35:
         6b:94:5c:52:e9:db:ec:e1:14:bc:5e:4b:57:04:0e:6b:8a:30:
         3a:0c:81:68:d7:50:83:b4:ac:6f:a7:3b:8d:9f:88:41:42:1b:
         81:01:27:08:f4:a7:c4:9a:10:bf:8f:e3:4e:d7:e9:0a:c1:78:
         07:51:46:d0:97:fe:62:47:35:74:30:b8:7a:e9:7d:fb:bb:15:
         13:3c:7f:18:a2:4f:4b:a0:81:a7:81:09:91:b5:d4:7f:92:4b:
         6f:a8:73:cb:4b:94:3f:0f:81:b6:19:19:e0:de:68:9c:d8:3b:
         fb:0f:50:bc:c0:9c:ac:c2:15:a5:d0:eb:1a:dc:83:cc:37:d0:
         af:4e:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----